Hackers hijacked a Claude Code extension, exposing yet another new AI security risk
For approximately 11 hours, a tampered extension designed to collect system information and establish SSH backdoors was available to developers. Cursor removed the extension upon discovery, and Anthropic clarified that its own systems were not compromised.
Key points
- Malicious Claude Code extension found on Cursor marketplace
- Attempted to install persistent SSH backdoors on user computers
- Cursor removed the extension; Anthropic stated its systems were unaffected
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. Fast Company Tech did the reporting; read the original for the full story.
Read the full story at Fast Company Tech
